reporting

Generate structured exploit reports with CVSS v4.0 scoring and attack path tracking.

7|1|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill reporting-arianhobson333
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reporting
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/Decepticon/skills/exploit/reporting
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill reporting-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires YAML, JSON, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps document and report the findings from exploitation activities, ensuring that all necessary information is captured and formatted according to industry standards.

Core Features & Use Cases

  • Exploit Report Generation: Automatically create structured exploit reports for each successful exploit, including initial access reports, exploit chain documentation, and CVSS v4.0 scoring.
  • Credential and Shell Tracking: Record and link captured credentials and shells to their respective findings, ensuring all evidence is associated with the correct exploit.
  • Attack Path Documentation: Document and link together multiple findings to illustrate complex exploit chains and demonstrate the full impact of the attack.

Quick Start

Generate a report for the latest exploit finding by running the 'generate-report' script.

Frequently Asked Questions about reporting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate exploit report generation with CVSS scoring for penetration testing findings?

Automate exploit report generation by using scripts that process structured YAML and JSON data to document findings, calculate CVSS v4.0 scores, and track attack paths. This standardizes post-exploitation reporting for security analysts.

What is the best way to document attack paths and exploit chains during incident response?

Document attack paths by linking multiple exploit findings together to illustrate complex chains. This establishes the full impact of an attack by connecting initial access reports, captured credentials, and shells to their respective findings.

How does CVSS v4.0 scoring work when documenting security findings?

CVSS v4.0 scoring in security findings documentation standardizes vulnerability severity assessment. It calculates exploit impact metrics from structured data, ensuring penetration testers capture consistent severity ratings across all generated reports.

Do I need YAML and JSON processing to track captured credentials and shells?

Yes, YAML and JSON processing are required to manage structured data and file operations for tracking captured credentials and shells. These formats ensure evidence is correctly linked to its respective exploit finding in the report.

Can I generate an initial access report for a specific exploit finding?

Yes, generate an initial access report for a specific finding by running the dedicated generate-report script. This automates the creation of structured exploit documentation, linking shells and credentials to the specific exploit.

What are the limitations of using structured data files for security analysis reporting?

Structured data files for security analysis reporting require strict YAML and JSON formatting to manage file operations correctly. Malformed structures will disrupt evidence linking, limiting the ability to accurately document complex exploit chains.